Route Origin Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233302e302f32342d3234203d3e203633323836.roa
File:                     31342e3133372e3233302e302f32342d3234203d3e203633323836.roa (raw, json)
Hash identifier:          QX5HMhG7nyBm71dztoJqsaxvVuK5/FwTC78AR0rx8x8=
Subject key identifier:   C3:48:66:7D:FF:48:31:70:BC:72:08:95:E9:42:71:0C:B5:9D:C2:75
Certificate issuer:       /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial:       4EEB159F5F7768B36CE10AD646200B2C23698917
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233302e302f32342d3234203d3e203633323836.roa
Signing time:             Mon 09 Nov 2026 09:53:10 +0000
ROA not before:           Mon 09 Nov 2026 09:48:10 +0000
ROA not after:            Mon 08 Nov 2027 09:53:10 +0000
asID:                     63286
IP address blocks:        14.137.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
                          rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 07:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:eb:15:9f:5f:77:68:b3:6c:e1:0a:d6:46:20:0b:2c:23:69:89:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
        Validity
            Not Before: Nov  9 09:48:10 2026 GMT
            Not After : Nov  8 09:53:10 2027 GMT
        Subject: CN=C348667DFF483170BC720895E942710CB59DC275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:39:ba:51:19:31:99:1e:0c:11:ea:6b:a5:ee:
                    43:57:80:1c:e9:fc:25:be:dc:ba:07:dc:e9:f0:23:
                    da:60:2b:f6:1a:2a:ca:58:9d:b8:48:2f:74:c1:57:
                    17:c1:10:8e:7f:fe:03:b3:c5:ba:cf:cf:c2:a1:82:
                    d3:8f:25:e3:a1:26:0f:49:40:14:e9:8b:f0:fe:c5:
                    f4:74:cd:55:06:d5:62:3c:ee:b5:25:63:a0:50:a9:
                    15:41:e5:2d:a0:79:cc:50:15:9c:0c:36:63:4b:2c:
                    83:6c:e5:fa:39:6c:98:f6:e9:e9:54:48:fc:c0:4f:
                    08:be:db:73:11:d7:8d:22:75:2e:b8:0c:0a:47:58:
                    e0:46:d2:c3:5d:19:3a:85:5d:60:58:2d:0d:48:ab:
                    33:82:ad:ac:3a:57:04:24:d4:33:0a:d9:3b:5b:f2:
                    fd:45:aa:75:c7:a5:c0:48:9c:7a:af:d2:8b:63:10:
                    e7:6c:0a:3e:5a:b2:47:a6:3d:76:f0:fa:29:b4:59:
                    5c:3f:41:2b:63:6c:d1:79:ad:a9:a2:c0:bc:4f:42:
                    44:b9:03:a8:17:11:85:67:49:6b:c6:2f:dc:bb:61:
                    00:55:08:b3:98:2d:51:04:89:3d:48:9e:4a:9c:95:
                    52:3f:13:8d:4c:f7:2b:24:3a:69:4c:de:34:43:d4:
                    26:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:48:66:7D:FF:48:31:70:BC:72:08:95:E9:42:71:0C:B5:9D:C2:75
            X509v3 Authority Key Identifier:
                keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233302e302f32342d3234203d3e203633323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.137.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:68:a6:6e:9a:18:90:2d:66:5c:94:8f:5c:84:dd:3c:37:23:
         04:3a:ba:cc:36:8d:9d:f6:f6:f4:02:4a:1a:1b:e3:6e:88:a2:
         5a:28:e7:05:dd:aa:e9:fa:7e:94:84:c7:c5:b9:4b:40:fc:2c:
         22:04:ca:f5:41:32:c9:47:e8:bc:69:d2:f2:f4:98:22:22:61:
         bc:71:b0:42:ae:46:79:dc:80:09:c6:a5:f0:d4:76:ac:fb:39:
         bd:3e:83:e6:df:a3:7c:f1:26:f9:ea:d1:ea:74:50:fd:ae:19:
         1d:3a:66:ae:51:eb:6d:a0:f6:b0:97:64:94:e8:a2:78:56:c2:
         9e:04:cc:12:86:b6:6f:f9:04:be:81:dd:55:98:11:30:21:b6:
         16:0f:ec:66:74:fb:d6:6a:92:dc:36:b8:54:76:cd:93:8e:30:
         ce:10:7d:13:97:bd:b1:c6:47:dc:49:72:f1:7a:08:e6:a2:81:
         63:1c:ad:4a:6b:07:93:f7:9a:30:86:46:28:68:3a:ba:e2:f0:
         72:b5:49:b6:bd:83:74:d7:67:3a:3a:1d:ea:13:59:98:b0:09:
         4b:a7:8a:ad:ea:e3:17:d7:b1:d7:eb:76:25:7f:4a:c3:f9:2e:
         37:b4:12:62:ac:dc:a0:12:2d:3a:75:48:4a:c9:8e:a6:97:10:
         53:65:97:a0
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUTusVn193aLNs4QrWRiALLCNpiRcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz
MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MTEwOTA5NDgxMFoX
DTI3MTEwODA5NTMxMFowMzExMC8GA1UEAxMoQzM0ODY2N0RGRjQ4MzE3MEJDNzIw
ODk1RTk0MjcxMENCNTlEQzI3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANw5ulEZMZkeDBHqa6XuQ1eAHOn8Jb7cugfc6fAj2mAr9hoqyliduEgvdMFX
F8EQjn/+A7PFus/PwqGC048l46EmD0lAFOmL8P7F9HTNVQbVYjzutSVjoFCpFUHl
LaB5zFAVnAw2Y0ssg2zl+jlsmPbp6VRI/MBPCL7bcxHXjSJ1LrgMCkdY4EbSw10Z
OoVdYFgtDUirM4KtrDpXBCTUMwrZO1vy/UWqdcelwEiceq/Si2MQ52wKPlqyR6Y9
dvD6KbRZXD9BK2Ns0XmtqaLAvE9CRLkDqBcRhWdJa8Yv3LthAFUIs5gtUQSJPUie
SpyVUj8TjUz3KyQ6aUzeNEPUJp0CAwEAAaOCAhEwggINMB0GA1UdDgQWBBTDSGZ9
/0gxcLxyCJXpQnEMtZ3CdTAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W
lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD
QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3
QzR0SzlEeEhMWElyOXVGcFEuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH
MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMkMy
NTMwMDAwLzAvMzEzNDJlMzEzMzM3MmUzMjMzMzAyZTMwMmYzMjM0MmQzMjM0MjAz
ZDNlMjAzNjMzMzIzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADonmMA0GCSqGSIb3DQEBCwUAA4IB
AQAmaKZumhiQLWZclI9chN08NyMEOrrMNo2d9vb0AkoaG+NuiKJaKOcF3arp+n6U
hMfFuUtA/CwiBMr1QTLJR+i8adLy9JgiImG8cbBCrkZ53IAJxqXw1Has+zm9PoPm
36N88Sb56tHqdFD9rhkdOmauUettoPawl2SU6KJ4VsKeBMwShrZv+QS+gd1VmBEw
IbYWD+xmdPvWapLcNrhUds2TjjDOEH0Tl72xxkfcSXLxegjmooFjHK1KaweT95ow
hkYoaDq64vBytUm2vYN012c6Oh3qE1mYsAlLp4qt6uMX17HX63Ylf0rD+S43tBJi
rNygEi06dUhKyY6mlxBTZZeg
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:11:53 2026 by rpki-client